Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-31435netfs: Fix read abandonment during retry
- CVE-2026-31434btrfs: fix leak of kobject name for sub-group space_info
- CVE-2026-31433ksmbd: fix potencial OOB in get_file_all_info() for compound requests
- CVE-2026-31432ksmbd: fix OOB write in QUERY_INFO for compound requests
- CVE-2026-31431crypto: algif_aead - Revert to operating out-of-place
- CVE-2026-31430X.509: Fix out-of-bounds access when parsing extensions
- CVE-2026-31429net: skb: fix cross-cache free of KFENCE-allocated skb head
- CVE-2026-31428netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
- CVE-2026-31427netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
- CVE-2026-31426ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
- CVE-2026-31425rds: ib: reject FRMR registration before IB connection is established
- CVE-2026-31424netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
- CVE-2026-31423net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
- CVE-2026-31422net/sched: cls_flow: fix NULL pointer dereference on shared blocks
- CVE-2026-31421net/sched: cls_fw: fix NULL pointer dereference on shared blocks
- CVE-2026-31420bridge: mrp: reject zero test interval to avoid OOM panic
- CVE-2026-31419net: bonding: fix use-after-free in bond_xmit_broadcast()
- CVE-2026-31418netfilter: ipset: drop logically empty buckets in mtype_del
- CVE-2026-31417net/x25: Fix overflow when accumulating packets
- CVE-2026-31416netfilter: nfnetlink_log: account for netlink header size
- CVE-2026-31415ipv6: avoid overflows in ip6_datagram_send_ctl()
- CVE-2026-31414netfilter: nf_conntrack_expect: use expect->helper
- CVE-2026-31413bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR
- CVE-2026-31412usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()
- CVE-2026-31411net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
- CVE-2026-31410ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION
- CVE-2026-31409ksmbd: unset conn->binding on failed binding request
- CVE-2026-31408Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
- CVE-2026-31407netfilter: conntrack: add missing netlink policy validations
- CVE-2026-31406xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini()